Forensic Toolkit (FTK), Registry Viewer Test Results for Windows Registry Forensic Tool   [open pdf - 4MB]

From the Introduction: "The Computer Forensics Tool Testing (CFTT) program is a joint project of the Department of Homeland Security (DHS), and the National Institute of Standards and Technology Special Program Office (SPO) and Information Technology Laboratory (ITL). CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, the National Institute of Justice (NIJ), and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires the development of specifications and test methods for computer forensic tools and subsequent testing of specific tools against those specifications. [...] This document reports the results from testing FTK [Forensic Toolkit] against a registry dataset that consists of various Windows NT registry hive files."

Public Domain
Retrieved From:
U.S. Department of Homeland Security: https://www.dhs.gov/
Media Type:
Help with citations